Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json)
Hash identifier: ZpjlQJri6PzXiUQTkf/+QSd1cwzgC8OkMFrpW0amGCg=
Subject key identifier: DD:2B:7E:0E:30:FC:B3:8C:E3:13:D5:3E:35:9D:6B:1B:4E:41:99:2A
Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Certificate serial: 0194BBCE411C14C84444DA54C25541CBE576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: CWnnQqjB+qGCjdG5d4dFXK4FUFnR5dm6Fagf0QPITts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:1c:14:c8:44:44:da:54:c2:55:41:cb:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=dd2b7e0e30fcb38ce313d53e359d6b1b4e41992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:a0:46:b5:5e:09:47:66:6d:01:50:43:16:
d1:a4:06:58:c4:53:ef:a8:7a:7a:6f:79:dd:36:6e:
29:6e:cc:08:cc:28:24:91:ce:da:d3:e7:70:ad:00:
6b:e4:45:ce:54:f6:ee:0f:9b:2a:71:e6:61:01:5f:
ea:b1:b6:87:86:d2:92:01:37:0a:36:ce:d7:15:92:
7a:ea:8d:c2:fa:bc:69:19:25:e2:e1:23:e1:f3:60:
6f:87:ce:2a:84:97:28:40:ac:82:1b:6c:3f:f7:89:
33:06:25:19:f3:76:b5:a0:3e:bc:4d:c4:26:7b:61:
09:46:d9:b9:c2:ed:24:5d:f5:c3:df:6f:37:ba:a8:
5f:a8:eb:64:ea:33:ba:4d:ba:eb:de:7c:7a:8b:34:
07:d4:de:2f:4c:c2:f8:36:b6:f2:70:6f:bd:8f:30:
7a:2a:5d:87:9d:e1:81:c6:0c:16:be:11:5e:bf:fd:
67:74:1a:55:9f:2a:23:c3:ea:19:b1:fb:e3:c6:a6:
b3:75:92:ba:f9:71:8a:73:3a:74:7f:6c:2a:ac:66:
1a:77:e5:fe:af:75:d8:e0:ed:09:8f:a7:5a:45:5c:
ae:d0:e4:bd:5d:6f:33:2d:89:cb:21:e2:18:92:50:
37:df:a7:dd:55:91:31:9d:aa:0c:81:87:bf:00:83:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:7E:0E:30:FC:B3:8C:E3:13:D5:3E:35:9D:6B:1B:4E:41:99:2A
X509v3 Authority Key Identifier:
keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:92:d9:82:69:1e:71:cb:d0:8b:66:3f:83:ca:47:f7:dd:20:
67:6f:dd:49:52:3f:9f:c7:ba:47:5b:a1:c8:20:c7:00:f7:7d:
d4:3e:45:ec:6b:c5:08:44:c0:d3:b8:ff:b7:1c:98:77:3e:c2:
25:a9:24:9f:24:8c:59:93:87:59:d4:8a:0e:54:09:be:a7:7a:
1e:19:3f:f1:4f:7d:bb:25:2a:61:d4:27:d7:86:59:46:25:a6:
86:ef:e3:41:08:30:49:e9:d8:f9:e1:05:aa:89:f0:3c:5b:e3:
2e:22:a4:1d:af:78:62:74:b2:10:2a:cf:54:ab:a8:04:63:03:
ad:e0:7a:b2:05:6a:60:5d:1a:87:76:aa:79:4b:37:68:d1:39:
64:71:04:3c:26:a8:31:ad:0f:6f:a0:8c:df:68:e3:10:75:42:
2e:2a:9e:90:0c:4c:1d:ea:3d:1d:47:67:ec:f0:15:81:0f:a4:
96:69:4a:ac:71:af:37:4d:e5:48:5a:a5:cd:86:9b:ab:6e:bb:
0c:c4:7f:dc:7a:12:01:00:2a:28:7d:eb:4e:50:69:9e:ed:ea:
24:e5:16:0b:18:3b:15:4e:86:a0:fe:40:a8:9a:91:79:19:60:
13:f7:9c:b0:c4:09:7d:be:e0:a2:1b:d1:ac:88:74:ec:08:9a:
cb:ab:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:56 2025 by rpki-client